rdais.platform.milcloud.mil

- u.s. government -

Issued by DOD CA-27

About this certificate

This digital certificate with serial number 01:ea:c4 was issued on by U.S. Government.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • SAN DNSName contains duplicate values (awslabs certlint)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

u.s. government

Organization: u.s. government
Organization unit: DOD
Organization unit: pki
Organization unit: disa
Country: us

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ea:c4
Serial Number (int): 125636
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: 94:1d:6f:7d:cd:b4:d2:23:f4:ab:0d:34:c3:9b:b8:f6:89:e2:38:36
AuthorityKeyId: 1b:04:04:40:45:5e:7d:2b:5e:0b:cc:99:65:4d:f3:a4:de:90:77:17

Fingerprint (sha1): bb:4c:26:b9:99:1b:3d:95:fb:84:26:90:fa:a9:46:1b:f7:c8:9c:10
Fingerprint (sha256): 05:cd:1a:a7:e5:64:fa:48:89:27:79:76:61:4f:9e:1a:61:e5:23:88:c2:e4:32:01:b6:e9:14:df:74:b7:12:35

Issuing Certificate URL: http://crl.disa.mil/sign/DODCA_27.cer

Revocation information

OCSP Server: http://ocsp.disa.mil
CRL Distribution Point: http://crl.disa.mil/crl/DODCA_27.crl
CRL Distribution Point: ldap://crl.gds.disa.mil/cn%3dDOD%20CA-27%2cou%3dPKI%2cou%3dDoD%2co%3dU.S.%20Government%2cc%3dUS?certificaterevocationlist;binary

Check the revocation status for certificate rdais.platform.milcloud.mil

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rdais.platform.milcloud.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Any

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rdais.platform.milcloud.mil
rdais.platform.milcloud.mil

Other certificates including the domain name milcloud.mil

(limited to 100 certificates)
rdais.platform.milcloud.mil
cbrnis.jpmis.milcloud.mil
rdais.platform.milcloud.mil
rdais-test.platform.milcloud.mil
myseco-preprod.platform.milcloud.mil
trtcs.milcloud.mil
manager011u.platform.milcloud.mil
mcipac.mcop.milcloud.mil
utinvpn.milcloud.mil
ugunvpn.milcloud.mil
myseco-preprod.platform.milcloud.mil
els023uvpn.milcloud.mil
manager006u.platform.milcloud.mil
myseco-test.platform.milcloud.mil
apacs.milcloud.mil
ugunvpn.milcloud.mil
gcdsaf7.af.mil
milcloud.mil
myseco-test.platform.milcloud.mil
usaf-acq-test.platform.milcloud.mil
manager012u.platform.milcloud.mil
usaf-acq.platform.milcloud.mil
usaf-acq-test.platform.milcloud.mil
mcincr.mcop.milcloud.mil
manager011u.platform.milcloud.mil
cbrnis.jpmis.milcloud.mil
mciwest.mcop.milcloud.mil
usaf-acq.platform.milcloud.mil
rdais-test.platform.milcloud.mil
efoia.milcloud.mil
www.milcloud.mil
utinvpn.milcloud.mil
ui.csd.disa.mil
geo.mcop.milcloud.mil
rdais.platform.milcloud.mil
manager006u.platform.milcloud.mil
mcieast.mcop.milcloud.mil
apacs-stg.milcloud.mil
myseco-test.platform.milcloud.mil
efoia.milcloud.mil
USAFA-COP.psif.milcloud.mil
els023uvpn.milcloud.mil
efoia.milcloud.mil
milcloud.mil
ugunvpn.milcloud.mil
utinhuhl.platform.milcloud.mil
issp.platform.milcloud.mil
efoia.milcloud.mil
mcicom.mcop.milcloud.mil
utinvpn.milcloud.mil
utinhuhk.platform.milcloud.mil
myseco-preprod.platform.milcloud.mil
manager006u.platform.milcloud.mil

Certificate

The complete raw certificate details for rdais.platform.milcloud.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xFisTFgM2T9kJNVxy9E
/jJ2S7Jh6EIOVVWdZJqjRAygWRCJTRx5Ln4cr7eKj89LBOIK3g1lG+KhxDlN1Xo7
4MyerUiiDuQ7UBw6sDRfVRP2cK3FWs7LjcmU3+JzqQ6yuYsMGo65tpy82lxGYqpL
9HIl87XGaEo0zKGhQshE9cNN+s9oxwB6A2Gbay76xtLITvzblioGSc1Tz15ngIvW
IV/jyHM2xVQq6riyoTS51bL7ceXNOaq+HGRYnmN6fSIbzdpvMZPY045npNnnCT5f
JpMsskMCmc3d4GFbvUl7R/IiSExOBLoAEHUfZqnBtRN124p15NkgmqsbeeX9zlSF
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 125636
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD CA-27'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-27 16:53:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-27 16:53:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'u.s. government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'disa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rdais.platform.milcloud.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30179528004474708040645907683090338230491001070992743127757828398600500235596682974321952110986355517556788449166750102648220190150200116847443232016267957245740737524753448875076996190480836679562949486583090419164324708201744442443369043713599048831942147191383652462027094058652713641765980404387179347906128675690967317249834674595452064336900577534015127157740430197391420016845826685674420318784449841252937975314688091673129970913682705624956737721632557288901819234358243233092198440765283609422673643004928952411553807678482609462004329921849510907417808507584294392158455823327902014743261576935900324333021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1b040440455e7d2b5e0bcc99654df3a4de907717
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							941d6f7dcdb4d223f4ab0d34c39bb8f689e23836
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODCA_27.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (187 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODCA_27.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://crl.gds.disa.mil/cn%3dDOD%20CA-27%2cou%3dPKI%2cou%3dDoD%2co%3dU.S.%20Government%2cc%3dUS?certificaterevocationlist;binary'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdais.platform.milcloud.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdais.platform.milcloud.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.5 (usDODClass3)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37.0 (anyExtendedKeyUsage)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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